IPEXPO2012

Press releases

• Splunk Launches Splunk App for Enterprise Security 2.0 SAN FRANCISCO - February 7, 2012 - Splunk Inc., a leading provider of software for real-time operational intelligence, today announced the general availability of its Enterprise Security Intelligence Solution, consisting of the Splunk App for Enterprise Security 2.0, and Splunk® Enterprise™ 4.3, the company's flagship software for collecting, indexing and harnessing machine data. "While more and more organizations are embracing the power of big data, many are ignoring the security threats that lurk within that information. Customers who use Splunk Enterprise to monitor and analyze machine data to gain insights into their operations in real-time can use the Splunk App for Enterprise Security to monitor, identify, investigate and respond to critical known and unknown security threats," said Christina Noren, senior vice president of solutions for Splunk. Splunk Enterprise provides visibility into a broad range of IT events including those that are beyond the purview of traditional security solutions, but are increasingly security-relevant. Splunk's big-data engine enables security professionals to quickly understand unknown threats hidden as patterns in terabytes of normal user-credentialed activities that can mean the presence of advanced malware or a malicious insider. The Splunk App for Enterprise Security provides the out-of-the-box security content that, combined with the core Splunk engine, delivers a next-generation security solution for monitoring known threats, support for forensic investigations, big data analytics to help identify advanced persistent threats, and dashboards for security posture and investigation workflows. "Big data and security analytics have become joined at the hip as of late," said Andrew Hay, senior analyst for 451 Research's Enterprise Security Practice (ESP). "The out-of-the-box" security content of the new Splunk App for Enterprise Security, combined with the big data analytics capabilities of the Splunk platform, delivers users a SIEM-like experience for massive data sets." The new Splunk App for Enterprise Security 2.0 builds upon the innovation of previous product releases, and leverages the Splunk Enterprise software, adding many benefits for security teams and support for risk management: Real-time Event Correlation: Searches and alerts drive continuous monitoring of critical assets using dashboards and communications to members of the security team Dashboards: Visualizations of security data support more than 100 security metrics and over 160 reports Drill-down and drill-across: In a single click, users can access raw data quickly for analysis and pivot across the raw data-types to follow an investigation wherever it leads Federated Identity Monitoring: Correlation of multiple user identities to identify and investigate user activities across the IT infrastructure Enhanced incident management: The ability to reprioritize, reassign and journal security events for quick resolution and incident response Operationalization of findings: Once a forensic investigation is complete, users can click the 'save' button to continuously monitor and alert for the same condition. "The Splunk App for Enterprise Security, together with core Splunk and other community supported apps available through SplunkBase, continue to provide a flexible solution of security metrics and dashboards that support views of our total enterprise risk," said Dan Frye, associate vice president, Corporate Security CedarCrestone, Inc. Splunk App for Enterprise Security 2.0 is available to current customers for immediate download. New users can contact Splunk sales at sales@splunk.com. More information about Splunk Enterprise Security Intelligence Solution can be found here: http://www.splunk.com/view/enterprise-security-app/SP-CAAAE8Z FS-splunk-AppEntSec-101-A4-web.pdf http://www.splunk.com/view/enterprise-security-app...

• Splunk Launches Splunk Enterprise 4.3 SAN FRANCISCO - January 10, 2012 - Splunk Inc., a leading provider of software for real-time operational intelligence, today announced the general availability of Splunk® Enterprise™ 4.3, the company's flagship software for collecting, indexing and harnessing machine data. "All kinds of companies are using Splunk to harness the value in their machine data. With their needs in mind, we've made Splunk 4.3 more powerful and usable for any situation and on any device," said Erik Swan, Splunk CTO and co-founder. Splunk 4.3 builds upon the innovation of previous product releases, adding compelling benefits for both IT and business users: Mobile: New non-Flash user interface delivers the power of Splunk anywhere More powerful: Up to 10x more concurrent users and 10x faster search, on the same deployment Easier to use: Dashboards now editable by business users and executives. The Splunk 4.3 beta program has resulted in positive feedback from its customers: 'Almost everything I do using Splunk's user interface takes half the time in 4.3. The new features mean that I am able to do so much more, and in a more intuitive way,' said Eddie Satterly, senior director of architecture & engineering at Expedia, one of the world's largest online travel agencies. "At Expedia, we have over 2,700 users of Splunk, and being able to provide dashboards on iPads means we can get more data to more people when they want it." "At Ceryx, messaging and collaboration is our business, and we go to Splunk to monitor service levels and look for abuse. Having Splunk dashboards available on iPads means we now gain real-time visibility across our infrastructure from wherever we are," said Derek Mock, director of software development at Ceryx, a Toronto-based managed IT services company specializing in private cloud-based messaging and collaboration solutions for enterprise clients. "The data preview feature speeds up the administration of Splunk and saves time so I can deliver services faster to customers and clients," said Thomas Paulsen, systems administrator at global multichannel retailer Otto Group GmbH. New features in Splunk 4.3 include: A more powerful user interface Availability on non-Flash-enabled mobile devices Being easier for business users: Users no longer have to edit XML to edit dashboards Ability to access real-time and historical analysis in a single step Accessing vital granular trend data at-a-glance via sparklines Speed and scale Up to 10X faster "needle in a haystack" search Up to 10X more concurrent users on same deployment Easier manageability Ability to preview new data sources before indexing Expanded controls for operational monitoring Easier alignment to complex enterprise security policies. "Splunk is at the forefront of helping organizations harness their big data," said Rachel Chalmers, research director of infrastructure management at The 451 Group. "Splunk 4.3 is an exciting, logical and evolutionary step that embraces mobility and increased ease of use. Splunk 4.3 is especially important for business users, with dashboards that provide insights - integrating real-time and historical data for analysis, and which are easy for business users to personalize on the fly." DS-splunk-106-A4-web-47c5a3.pdf http://www.splunk.com/view/whats-new/SP-CAAAFD2